Claims 

1. (Currently Amended) A method comprising: 

storing, in a memory, instructions for performing the method; 
executing the instructions on a processor; 
according to the instructions being executed: 

enumerating local credentials and remote credentials in response to 
receiving a first event notification, wherein the first event notification comprises a 
lock event 

enumerating the local credentials and the remote credentials in response 
to receiving a second event notification, wherein the second event notification is 
different from the first event notification and comprises a startup event; 

enumerating the local credentials and the remote credentials in response 
to receiving a third event notification, wherein the third event notification is 
different from the first and second event notifications and comprises a shutdown 
event; 

enumerating the local credentials and the remote credentials in response 
to receiving a fourth event notification, wherein the fourth event notification is 
different from the first, second, and third event notifications and comprises a 
logon event; 

enumerating the local credentials and the remote credentials in response 
to receiving a fifth event notification, wherein the fifth event notification is different 
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from the first, second, third, and fourth event notifications and comprises a logoff 
event; 

enumerating the local credentials and the remote credentials in response 
to receiving a sixth event notification, wherein the sixth event notification is 
different from the first, second third, fourth, and fifth even notifications and 
comprises a unlock event; 

enumerating the local credentials and the remote credentials in response 
to receiving a seventh event notification, wherein the seventh event notification is 
different from the first, second, third, fourth, fifth, and sixth event notifications and 
comprises a session event; 

enumerating the local credentials and the remote credentials in response 
to receiving an eighth event notification, wherein the eighth event notification is 
different from the first, second, third, fourth, fifth, sixth, and seventh event 
notifications and comprises a timer event; 

enumerating the local credentials and the remote credentials in response 
to receiving a ninth event notification, wherein the ninth event notification is 
different from the first, second, third, fourth, fifth, sixth, seventh, and eighth event 
notifications and comprises a manual request; and 

enumerating the local credentials and the remote credentials in response 
to receiving a tenth event notification, wherein the tenth event notification is 
different from the first, second, third, fourth, fifth, sixth, seventh, eighth, and ninth 
event notifications and comprises a credential update event ; 
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based on the enumerating, evaluating the local credentials and the remote 
credentials; and 

based on the evaluating, synchronizing the local credentials and remote 
credentials. 

2. (Original) The method of claim 1, wherein synchronizing the local 
credentials and the remote credentials is based on at least one time-stamp associated 
with the local credentials and at least one time-stamp associated with the remote 
credentials. 

3. (Original) The method of claim 1, wherein synchronizing the local 
credentials and the remote credentials is based on a comparison of hash values. 

4. (Original) The method of claim 1, wherein synchronizing includes 
error handling. 

5. (Original) The method of claim 1, wherein synchronizing includes 
writing at least one of the local credentials to a remote credential cache. 

6. (Original) The method of claim 1, wherein synchronizing includes 
writing at least one of the remote credentials to a local credential cache. 
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7. (Original) The method of claim 1, wherein synchronizing includes 
deleting at least one of the local credentials from a local credential cache. 

8. (Original) The method of claim 1, wherein synchronizing includes 
deleting at least one of the remote credentials from a remote credential cache. 

9. (Original) The method of claim 1, wherein synchronizing includes 
modifying at least one of the local credentials at a local credential cache based on at 
least one of the remote credentials. 

10. (Original) The method of claim 1, wherein synchronizing includes 
modifying at least one of the remote credentials at a remote credential cache based on 
at least one of the local credentials. 

11. (Original) The method of claim 1, further comprising updating a list of 
local credentials. 

12. (Original) The method of claim 1, further comprising updating a list of 
remote credentials. 

13. (Original) The method of claim 1, further comprising determining a 
state of the remote credentials dynamically. 
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14. (Original) The method of claim 1, further comprising maintaining a 
state file for the remote credentials. 

15. (Original) The method of claim 1, further comprising maintaining a 
state file for the local credentials. 

16. (Original) The method of claim 1, further comprising resolving a 
conflict of state between the local credentials and the remote credentials. 

17. (Previously Presented) A computer readable storage media encoded with 
a computer program for executing on a computer system a computer process, the 
computer process comprising: 

enumerating local credentials and remote credentials in response to 
receiving an event notification, wherein the event notification comprises an 
unlock event and wherein the credential comprises at least one of the following: 

a token; and 

an XrML license; 

synchronizing the local credentials and remote credentials via a 
synchronizing module, wherein the synchronizing module: 

sorts the local credentials and the remote credentials into a local 
credential array and a remote credential array respectively and compares 
the local credential array and the remote credential array; and 

stores a state file for conflict resolution, the state file comprising: 
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a file version; 

a flag, wherein the flag indicates whether the credential is 
user-protected; and 

a credential state, wherein the credential state comprises: 
last time synchronization module called; 
last time local store changed; and 
last time remote cache changed; 
based on the synchronizing module comparing the local credential array 
and the remote credential array, removing at least one of the local credentials 
from a first local credential cache associated with a first device, wherein the 
credential removed from the first local credential cache is identified and tagged 
by the synchronization module in a remote credential cache; 

based on the synchronizing module comparing the local credential array 
and the remote credential array, removing the tagged credential from a second 
local credential cache associated with a second device, wherein the first device 
is different than the second device, without rewriting the tagged credential to the 
remote credential cache; and 

handling errors, wherein error handling comprises returning a write state 
indication of a status of a credential write operation, wherein the write state 
indication consists of one of the following: 

a none indication, wherein the none indication comprises an 
indication that the credential was not altered; 
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a partial indication, wherein the partial indication comprises an 
indication that the credential was partially altered; or 

a done indication, wherein the done indication comprises an 
indication that the credential was successfully changed. 

18. (Previously Presented) The computer readable storage media of claim 
17 wherein the computer process further comprises synchronizing the local credentials 
and the remote credentials is based on at least one time-stamp associated with the 
local credentials and at least one time-stamp associated with the remote credentials. 

19. (Previously Presented) The computer readable storage media of claim 
17 wherein the computer process further comprises synchronizing the local credentials 
and the remote credentials is based on a comparison of hash values. 

20. (Previously Presented) The computer readable storage media of claim 
17 wherein the computer process further comprises writing at least one of the local 
credentials to a remote credential cache. 

21. (Previously Presented) The computer readable storage media of claim 
17 wherein the computer process further comprises writing at least one of the remote 
credentials to a local credential cache. 
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22. (Previously Presented) The computer readable storage media of claim 
17 wherein the computer process further comprises removing at least one of the local 
credentials from a local credential cache. 

23. (Previously Presented) The computer readable storage media of claim 
17 wherein the computer process further comprises removing at least one of the remote 
credentials from a remote credential cache. 

24. (Previously Presented) The computer readable storage media of claim 
17 wherein the computer process further comprises modifying at least one of the local 
credentials at a local credential cache. 

25. (Previously Presented) The computer readable storage media of claim 
17 wherein the computer process further comprises modifying at least one of the remote 
credentials at a remote credential cache. 

26. (Previously Presented) The computer readable storage media of claim 17 
wherein the computer process further comprises updating the array of local credentials. 

27. (Previously Presented) The computer readable storage media of claim 17 
wherein the computer process further comprises updating the array of remote 
credentials. 
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28. (Canceled) 



29. (Previously Presented) The computer readable storage media of claim 
17 wherein the computer process further comprises determining a state of the remote 
credentials dynamically. 

30. (Canceled) 

31. (Canceled) 

32. (Previously Presented) The computer readable storage media of claim 
17 wherein the computer process further comprises resolving a conflict of state between 
the local credentials and the remote credentials. 

33. (Currently Amended) A system comprising: 
an event handler to receive event notifications; and 

a synchronizing module operatively associated with the event handler to 
synchronize local credentials and remote credentials when the event handler receives 
an e v e nt not i f i cat i on a plurality of unique event notifications and if the local and remote 
credentials are different from one anothe r, wh e r ei n th e e v e nt not i f i cat i on i s at le ast on e 
of th e fo ll ow i ng: 

a l ock e v e nt; and 

an un l ock e v e nt . 
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34. (Canceled) 



35. (Original) The system of claim 33, wherein the credentials include at 
least one of the following: an encryption credential, a token, an asymmetric key pair, a 
symmetric key, a digital certificate, an XrML license, an authentication credential, an 
authorization credential. 

36. (Original) The system of claim 33, further comprising a local store 
manager to enumerate the local credentials for the synchronizing module. 

37. (Original) The system of claim 33, further comprising a remote store 
manager to enumerate the remote credentials for the synchronizing module. 

38. (Original) The system of claim 33, wherein the local credentials are 
stored in a local cache. 

39. (Original) The system of claim 33, wherein the local credentials are 
stored in a local cache provided at any number (n) of clients. 

40. (Original) The system of claim 33, wherein the local credentials are 
encrypted using a master key. 
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41 . (Original) The system of claim 33, wherein the remote credentials are 

stored in a remote cache. 



42. (Original) The system of claim 33, wherein the local credentials are 
stored in a remote cache provided at any number (n) of hosts. 

43. (Original) The system of claim 33, wherein the remote credentials are 
maintained by a remote directory service. 

44. (Original) The system of claim 33, wherein the remote credentials are 
encrypted. 

45-47. (Canceled) 

48. (Canceled) 

49. (Currently Amended) The method of claim [[48]] 1, wherein the session 
event comprises at least one of: 

a policy update; 
running a process; and 
connecting to a network. 
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